When a server has been running with antirelayd enabled, and antirelayd is then disabled, then the contents of /etc/relayhosts and /etc/relayhostsusers are not deleted. I'm pretty sure the latter is not a risk, but the former could present a risk should one of thr IP addresses be under the control of undesirables?